<![CDATA[how do i convince Alpine Linux that it doesn't have IPv4 connectivity?]]>how do i convince Alpine Linux that it doesn't have IPv4 connectivity? when i run e.g. "ping bbc.co.uk", it picks the IPv4 address first, even though it doesn't have a default route.

i can't disable IPv4 because i need it for Wireguard.

i can't use /etc/gai.conf because musl libc doesn't support that.

this makes e.g. apk very slow because it waits for IPv4 to time out before it tries IPv6. i don't understand why it doesn't immediately get "no route to host" over IPv4...

any ideas?

]]>https://board.circlewithadot.net/topic/9fbc58f1-4547-46cc-b076-69f3518289b2/how-do-i-convince-alpine-linux-that-it-doesn-t-have-ipv4-connectivityRSS for NodeWed, 29 Apr 2026 19:22:33 GMTWed, 08 Apr 2026 11:55:46 GMT60<![CDATA[Reply to how do i convince Alpine Linux that it doesn't have IPv4 connectivity? on Wed, 08 Apr 2026 12:49:29 GMT]]>@litchralee_v6 yeah, i think it must be something like that. for now i'm going to leave it with my hacky OUTPUT REJECT rule and come back to this later 😄 thanks for the help!

]]>https://board.circlewithadot.net/post/https://mastodon.bsd.cafe/users/lw/statuses/116369166812040662https://board.circlewithadot.net/post/https://mastodon.bsd.cafe/users/lw/statuses/116369166812040662Wed, 08 Apr 2026 12:49:29 GMT<![CDATA[Reply to how do i convince Alpine Linux that it doesn't have IPv4 connectivity? on Wed, 08 Apr 2026 12:47:26 GMT]]>@lw I did have weirdness when having ULAs (first time trying openwrt) with preference, but yeah not sure...

]]>https://board.circlewithadot.net/post/https://wetdry.world/users/lucasmz/statuses/116369158725551275https://board.circlewithadot.net/post/https://wetdry.world/users/lucasmz/statuses/116369158725551275Wed, 08 Apr 2026 12:47:26 GMT<![CDATA[Reply to how do i convince Alpine Linux that it doesn't have IPv4 connectivity? on Wed, 08 Apr 2026 12:45:49 GMT]]>@lw I think, but I'm not certain, this might be due to how WG attaches itself to the iptables/nftables chain, stealing packets before they get to the routing decision.

Perhaps "iptables -vL" will show something along those lines? It's been a while since I've dealt with iptables, and I now mostly prefer to do WG in a separate namespace so that my application containers don't have to be dual-stack.

]]>https://board.circlewithadot.net/post/https://ipv6.social/users/litchralee_v6/statuses/116369152370417206https://board.circlewithadot.net/post/https://ipv6.social/users/litchralee_v6/statuses/116369152370417206Wed, 08 Apr 2026 12:45:49 GMT<![CDATA[Reply to how do i convince Alpine Linux that it doesn't have IPv4 connectivity? on Wed, 08 Apr 2026 12:44:32 GMT]]>@lucasmz although, perhaps this is related to the host itself having a ULA, so it prefers the IPv4 address. but this doesn't seem to be configurable in musl 😕

on FreeBSD it just works, since it realises the host has no IPv4 connectivity.

]]>https://board.circlewithadot.net/post/https://mastodon.bsd.cafe/users/lw/statuses/116369147331277570https://board.circlewithadot.net/post/https://mastodon.bsd.cafe/users/lw/statuses/116369147331277570Wed, 08 Apr 2026 12:44:32 GMT<![CDATA[Reply to how do i convince Alpine Linux that it doesn't have IPv4 connectivity? on Wed, 08 Apr 2026 12:43:20 GMT]]>@lucasmz "why is IPv4 being preferred?" is exactly what i'm asking 😄

i do use ULAs internally, but that shouldn't affect "ping bbc.co.uk" since it has a GUA.

]]>https://board.circlewithadot.net/post/https://mastodon.bsd.cafe/users/lw/statuses/116369142626802109https://board.circlewithadot.net/post/https://mastodon.bsd.cafe/users/lw/statuses/116369142626802109Wed, 08 Apr 2026 12:43:20 GMT<![CDATA[Reply to how do i convince Alpine Linux that it doesn't have IPv4 connectivity? on Wed, 08 Apr 2026 12:41:23 GMT]]>@lw why is IPv4 being preferred anyway are you using ULAs

]]>https://board.circlewithadot.net/post/https://wetdry.world/users/lucasmz/statuses/116369134924309475https://board.circlewithadot.net/post/https://wetdry.world/users/lucasmz/statuses/116369134924309475Wed, 08 Apr 2026 12:41:23 GMT<![CDATA[Reply to how do i convince Alpine Linux that it doesn't have IPv4 connectivity? on Wed, 08 Apr 2026 12:36:59 GMT]]>@litchralee_v6 okay so, bizarrely, the packets are going over the Wireguard interface.

hyacinth# ping bbc.co.uk
PING bbc.co.uk (151.101.192.81): 56 data bytes

---

hyacinth:/etc# tcpdump -ni rose dst host 151.101.192.81
tcpdump: verbose output suppressed, use -v[v]... for full protocol decode
listening on rose, link-type RAW (Raw IP), snapshot length 262144 bytes
13:35:52.189219 IP 23.155.224.95 > 151.101.192.81: ICMP echo request, id 8050, seq 57, length 64
13:35:53.189802 IP 23.155.224.95 > 151.101.192.81: ICMP echo request, id 8050, seq 58, length 64
13:35:54.189848 IP 23.155.224.95 > 151.101.192.81: ICMP echo request, id 8050, seq 59, length 64

but there's no route, so this shouldn't be happening. perhaps wg-quick is doing some "helpful magic" here?

(i usually use plain wg, but that seems to be a bit of a pain on Linux...)

]]>https://board.circlewithadot.net/post/https://mastodon.bsd.cafe/users/lw/statuses/116369117628169110https://board.circlewithadot.net/post/https://mastodon.bsd.cafe/users/lw/statuses/116369117628169110Wed, 08 Apr 2026 12:36:59 GMT<![CDATA[Reply to how do i convince Alpine Linux that it doesn't have IPv4 connectivity? on Wed, 08 Apr 2026 12:32:17 GMT]]>@lw Firstly, I want to apologize for missing the part in your original post where you already said there was no default route. I now see how strange the situation is.

It's perplexing as to what would be holding up the v4 connection. Is tcpdump or Wireshark available to examine the traffic? The primary DNS server is on v6?

]]>https://board.circlewithadot.net/post/https://ipv6.social/users/litchralee_v6/statuses/116369099136306680https://board.circlewithadot.net/post/https://ipv6.social/users/litchralee_v6/statuses/116369099136306680Wed, 08 Apr 2026 12:32:17 GMT<![CDATA[Reply to how do i convince Alpine Linux that it doesn't have IPv4 connectivity? on Wed, 08 Apr 2026 12:31:17 GMT]]>workaround:

iptables -A OUTPUT -j REJECT

not ideal, but at least installing packages works now...

]]>https://board.circlewithadot.net/post/https://mastodon.bsd.cafe/users/lw/statuses/116369095207076967https://board.circlewithadot.net/post/https://mastodon.bsd.cafe/users/lw/statuses/116369095207076967Wed, 08 Apr 2026 12:31:17 GMT<![CDATA[Reply to how do i convince Alpine Linux that it doesn't have IPv4 connectivity? on Wed, 08 Apr 2026 12:22:24 GMT]]>@litchralee_v6

hyacinth:~# ip -4 route
23.155.224.0/24 dev eth0 proto kernel scope link src 23.155.224.95
176.126.243.164 via 23.155.224.1 dev eth0
hyacinth:~#

that /32 route is the Wireguard endpoint, no default route.

]]>https://board.circlewithadot.net/post/https://mastodon.bsd.cafe/users/lw/statuses/116369060302507614https://board.circlewithadot.net/post/https://mastodon.bsd.cafe/users/lw/statuses/116369060302507614Wed, 08 Apr 2026 12:22:24 GMT<![CDATA[Reply to how do i convince Alpine Linux that it doesn't have IPv4 connectivity? on Wed, 08 Apr 2026 12:21:53 GMT]]>@lw What does "ip -4 route" look like? There might be a default route that it's trying to connect through, one which dead-ends but it won't know that until it tries. For WG, if you remove the default route and replace it with a static route for precisely the WG endpoint, I think that should result in all Legacy IP traffic being unroutable except for WG.

]]>https://board.circlewithadot.net/post/https://ipv6.social/users/litchralee_v6/statuses/116369058276446317https://board.circlewithadot.net/post/https://ipv6.social/users/litchralee_v6/statuses/116369058276446317Wed, 08 Apr 2026 12:21:53 GMT<![CDATA[Reply to how do i convince Alpine Linux that it doesn't have IPv4 connectivity? on Wed, 08 Apr 2026 11:59:03 GMT]]>@lw Here's their issue tracker: https://gitlab.alpinelinux.org/groups/alpine/-/issues

]]>https://board.circlewithadot.net/post/https://mas.to/users/UnderEu/statuses/116368968466370664https://board.circlewithadot.net/post/https://mas.to/users/UnderEu/statuses/116368968466370664Wed, 08 Apr 2026 11:59:03 GMT